Privacy Policy
At The Oddities Store, we are committed to protecting your personal information and respecting your privacy in line with the UK General Data Protection Regulation (UK GDPR). This policy outlines what personal data we collect, how we use it, and your rights as a customer.
1. Who We Are
The Oddities Store is a UK-based independent crochet and knitwear brand offering made-to-order garments, limited product drops, and in-store sales. If you have any questions about this policy, you can contact us at:
hello.theodditiesstore@gmail.com
2. What Data We Collect
We may collect and process the following personal data:
-
Identity & Contact Data: Name, email address, phone number, postal address
-
Order Details: Items purchased, delivery instructions, customisation or sizing notes
-
Payment Data: Processed securely by third-party providers (e.g. Wix Payments, PayPal, Stripe). We do not store card details
-
Consultation Data: Notes from bespoke consultations including preferences, measurements, and style requests
-
Communication Data: Emails, messages, and feedback from you
-
Usage Data: Website browsing activity via cookies or analytics (see section 8)
3. How We Use Your Data
We use your information to:
-
Process and fulfil your orders
-
Book and manage bespoke consultations
-
Contact you about your purchases or enquiries
-
Send email updates or promotional content (if you’ve opted in)
-
Improve our website and services
We will never sell your data or share it with unauthorised third parties.
4. Legal Bases for Processing
We only use your data when we have a lawful basis to do so:
-
Contractual necessity – to process your orders or bookings
-
Consent – for marketing communications
-
Legal obligation – for tax, accounting, or legal compliance
-
Legitimate interests – e.g. to respond to enquiries or improve services
5. Data Retention
We retain personal data only for as long as necessary:
-
Order and payment records – kept for up to 6 years (for legal/tax purposes)
-
Consultation notes – kept for 12 months unless part of a completed bespoke order
-
Marketing consent – until you unsubscribe or withdraw consent
6. Your Rights
Under UK GDPR, you have the right to:
-
Access the data we hold about you
-
Request correction of inaccurate data
-
Request deletion of your data ("right to be forgotten")
-
Object to or restrict certain uses of your data
-
Withdraw consent at any time (e.g. unsubscribe from emails)
To exercise any of these rights, contact us via [Insert email].
7. How We Keep Your Data Safe
We use trusted platforms (e.g. Wix, Stripe, PayPal) that comply with modern security standards. Internally, we:
-
Limit access to personal data
-
Use secure passwords and data encryption
-
Avoid storing data offline or in unsecured formats
8. Cookies & Analytics
We may use cookies to improve user experience and monitor website performance. You can adjust your cookie settings through your browser or opt out of non-essential cookies.
9. Third-Party Services
We only share data with trusted third-party providers that help us run our store, such as:
-
Wix (website and store hosting)
-
Stripe, PayPal, Wix Payments (payment processors)
-
Royal Mail or courier services (for delivery)
-
Booking tools (for consultations)
All partners are GDPR-compliant.
10. Changes to This Policy
We may update this policy from time to time. The most recent version will always be available on our website, and material changes will be notified via email (if applicable).
Contact Us
If you have questions, complaints, or requests regarding your data, please contact: